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DETAILED ACTION 



1. 



Claims 1-29 are pending in this application. 



2. 



Office action in response to amendment filed 4/10/07. 



Claim Objections 



1 . The claim objection with regard to claim 3 is withdrawn in view of amendment 
filed 4/10/07. 



1 . The following is a quotation of 35 U.S. C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived 
by the manner in which the invention was made. 



2. Claims 1, 3, 5, 6, 8, 10-12, 15, 17-21, and 25-28 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Rawson (US 6,182,223), hereafter "Rawson" in view 
of Lettvin (US 5,559,960), hereafter "Lettvin", 



Claim Rejections - 35 USC § 103 
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3. Considering Claims 1, 8, 15, and 23, Rawson discloses a method to provide 
network traffic support and physical security support (abstract) comprising: 
identifying at least one of a network traffic intrusion event and a physical security 
intrusion event with the VMM (column 6- lines 4-20); and implementing at least 
one of a network traffic support and a physical security support in response to the 
at least one of the network traffic intrusion event and the physical security 
intrusion event (column 4- lines 12-27). 

Rawson does not explicitly disclose initializing a virtual machine monitor (VMM) 
in a processor system during a pre-boot phase. 

Lettvin discloses initializing a virtual machine monitor (VMM) in a processor 
system during a pre-boot phase (column 7-lines 23-67, column 8- lines 1-17, Fig. 
3). 

Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify Rawson by initializing the VMM during 
a pre-boot phase as taught by Lettvin to provide a startup disk that causes the 
computer to automatically execute anti-virus software each time the computer 
starts from the disk, i.e., during bootstrap, so as to detect bootstrap time viruses 
before or after they have executed and implanted themselves in the system 
(Lettvin- column 2- lines 56-61). 
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4. Considering Claims 3, 10, 17, 18, 25, and 26, the combination of Rawson and 
Lettvin discloses identifying the at least one of the network traffic intrusion event 
and the physical security intrusion event with the VMM comprises detecting 
opening of a chassis associated of the processor system via a chassis intrusion 
switch (Rawson- column 3- lines 4-11, column 6- lines 4-19). 

5. Considering Claims 5, 12, 20, and 28, the combination of Rawson and Lettvin 
discloses implementing the at least one of the network traffic support and the 
physical security support comprises disabling the processor system in response 
to identifying the physical security intrusion event (Rawson- column 4- lines 21- 
27). 

6. Considering Claim 6, the combination of Rawson and Lettvin discloses 
identifying a user authorization for the physical security intrusion event of the 
processor system (Rawson- column 4- lines 1-27). 

7. Considering Claim 14, the combination of Rawson and Lettvin discloses the 
machine readable medium comprises one of a programmable gate array, 
application specific integrated circuit, erasable programmable read only memory, 
read only memory, random access memory, magnetic media, and optical media. 
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Rawson does disclose the machine readable medium comprises one of a 
programmable gate array, application specific integrated circuit, erasable 
programmable read only memory, read only memory, random access memory, 
magnetic media, and optical media (Lettvin- abstract, column 6- lines 15-39, Fig. 

1). 

8. Considering Claim 21, the combination of Rawson and Lettvin discloses the data 
structure comprises a flash memory (Lettvin- abstract, column 2- lines 56-61). 

9. Claims 2, 4, 7, 9, 11, 13, 16, 19, 22, 24, 27, and 29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Rawson and Lettvin in view of Suuronen et al. 
(US 2003/0145228), hereafter "Suuronen". 

10. Considering Claims 2, 9, 16, and 24, the combination of Rawson and Lettvin 
does not explicitly disclose identifying the at least one of the network traffic 
intrusion event and the physical security intrusion event with the VMM comprises 
detecting at least one of a packet accessing a restricted port, a packet 
associated with a virus identifier, a SYN packet, and an alert standard format 
packet. Lettvin does suggest performing an integrity check on itself to ascertain 
whether it has bee damaged, e.g., by a virus attack, and announces the results 
of the self test (Lettvin- column 7- lines 23-27). 
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Suuronen discloses identifying the at least one of the network traffic intrusion 
event and the physical security intrusion event with the VMM comprises detecting 
at least one of a packet accessing a restricted port, a packet associated with a 
virus identifier, a SYN packet, and an alert standard format packet ([0005], [0010] 
lines 4-12, Fig. 1). 

Therefore, it would have been obvious to one of ordinary skill in the art at 
the time the invention was made to modify the combination of Rawson and 
Lettvin by identifying a virus identifier associated with network traffic as taught by 
Suuronen in order to provide a method of virus protection (Suuronen- abstract). 

1 1 . Considering Claims 4, 11, 19, and 27, the combination of Rawson, Lettvin, and 
Suuronen discloses implementing the at least one of the network traffic support 
and the physical security support comprises discarding a packet associated with 
network traffic in response to identifying the network traffic intrusion event 
(Suuronen- [0010] lines 4-12, Fig. 1). 

12. Considering Claims 7, 13, 22, and 29, the combination of Rawson, Lettvin, and 
Suuronrn discloses the processor system is associated with at least one of a 
private internal network and the Internet (Suuronen- Fig 2, Fig. 3). 
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Response to Arguments 

1 . Applicant's arguments, see Remarks p. 1-2, filed 4/10/07, with respect to the 
rejection(s) of claim(s) 1, 8, 15, and 23 under USC 102(a) have been fully considered 
and are persuasive. Therefore, the rejection has been withdrawn. However, upon 
further consideration, a new ground(s) of rejection is made. 

Conclusion 



1 . The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

US 6,867,068- Executing a security program upon start-up. 
US 4,975,950 - Anti-Virus check before boot-up. 
US 5,802,277 - Pre-Boot virus protection system. 
US 6,434,697 - Chassis Intrusion Detection. 
US 2002/0083344 - Virus Monitor. 



2. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Randal D. Moran whose telephone number is 571-270- 
1255. The examiner can normally be reached on M-F: 7:30-5:00. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on 571-272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



Randal D. Moran 
/RDM/ 



6/12/07 




